Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
File: a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json)
Hash identifier: up/ZfAo0FcnAETtDyeZqM5+avIEjodKO5gMbnwSRN6I=
Subject key identifier: F8:92:43:7C:A2:56:79:D5:8F:0A:0C:F6:CA:04:72:4F:1C:AD:52:78
Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
Certificate issuer: /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Certificate serial: 019D3909D28DA0BB7EEE4350ECD5454B7F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
Manifest number: 0734
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: kMoMoZPDYpfiULORUjwdjtv2Pan1mvnImhF0/dUwwaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d2:8d:a0:bb:7e:ee:43:50:ec:d5:45:4b:7f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=f892437ca25679d58f0a0cf6ca04724f1cad5278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:6e:eb:f6:4d:a6:7a:87:d2:05:99:74:c3:
23:20:ae:3d:77:e2:0f:1e:81:ba:c3:55:f9:96:87:
46:3b:f3:8f:bc:c9:71:17:a7:7a:70:c3:cc:d4:32:
0e:9b:11:c7:3f:3f:f0:61:f8:9b:68:06:1a:1e:4c:
36:f7:0e:0f:95:2f:94:de:87:69:ef:3f:67:bf:f6:
8d:dd:50:49:0e:0b:eb:81:1b:77:2b:91:38:ff:f3:
f4:85:b9:f1:b4:64:82:a6:2b:d6:2f:fd:52:69:5c:
37:b5:ce:fa:8b:a9:16:42:87:d4:60:34:aa:6c:ea:
20:36:4b:35:2c:5a:89:b5:ce:c0:b0:98:93:70:7d:
9f:6e:fb:18:fe:1a:82:67:34:55:4b:f7:ae:e8:3d:
30:7d:a3:bf:05:db:25:5e:54:f6:87:a3:19:a3:d6:
aa:45:34:f7:20:25:94:0e:1c:ea:87:5b:60:c5:4f:
63:c5:30:7e:da:0c:78:6e:f4:84:0e:bd:d0:cc:40:
e1:dc:e3:a7:07:d9:8a:48:18:3c:79:1b:03:46:c1:
72:d9:aa:c6:55:51:18:1a:a3:a0:02:9c:dd:53:80:
02:34:cf:82:f3:ff:fd:5a:cf:ba:24:fd:68:69:61:
e1:b3:42:15:fb:6d:63:cb:45:4e:02:4d:48:32:c1:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:92:43:7C:A2:56:79:D5:8F:0A:0C:F6:CA:04:72:4F:1C:AD:52:78
X509v3 Authority Key Identifier:
keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f7:9c:12:90:f2:b3:73:80:d5:c9:e3:65:b5:8c:0f:16:71:
c2:57:06:b0:5e:d2:40:b3:3c:af:22:77:4b:22:55:2d:db:dc:
af:a2:9b:48:70:70:2e:11:19:17:f5:4e:6b:19:59:87:67:e1:
2f:e8:1c:bb:95:cc:1e:be:79:0b:7d:59:11:ff:97:8f:6e:3b:
0b:d9:2f:c7:6a:26:55:83:d7:e8:f0:bf:4b:13:2c:92:4b:23:
74:ac:cd:7d:3b:12:d0:a8:b4:56:9c:60:91:5e:ff:a9:ca:42:
e0:dc:00:3c:38:80:3c:a5:29:f8:9c:6b:75:19:c7:8a:5e:0f:
0c:ec:c5:f7:c8:43:67:5e:45:3d:5e:86:56:1e:0d:0b:f4:24:
22:51:81:27:09:18:48:f4:18:45:1a:48:62:5c:8e:48:ff:18:
3a:0e:5c:d2:2e:0b:31:cd:35:ea:14:b3:9a:f9:43:9e:1c:4c:
01:73:ac:9c:ce:c8:68:f9:b4:fa:46:f5:bf:1b:d3:46:ef:45:
56:33:59:4c:99:cc:27:36:b6:0a:a3:71:b5:d1:36:47:1c:d0:
42:95:86:a1:b7:16:c8:4c:cf:d6:aa:af:a7:87:9f:d3:21:68:
e5:be:d4:63:a1:c0:a6:52:96:db:02:b8:ab:94:8e:8a:a0:82:
53:d5:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:42 2026 by rpki-client